Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/uYDjKj_2ecphwo-RhJWcDf5I_vA.roa
File: uYDjKj_2ecphwo-RhJWcDf5I_vA.roa (raw, json)
Hash identifier: gtnyVLtplzAttZtc1BucUjsPhVjeZCl5GPnA/zuU+lM=
Subject key identifier: B9:80:E3:2A:3F:F6:79:CA:61:C2:8F:91:84:95:9C:0D:FE:48:FE:F0
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 030AC0DA
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/uYDjKj_2ecphwo-RhJWcDf5I_vA.roa
Signing time: Sat 01 Jan 2022 07:52:58 +0000
ROA not before: Sat 01 Jan 2022 07:52:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208742
IP address blocks: 45.84.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51036378 (0x30ac0da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Jan 1 07:52:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b980e32a3ff679ca61c28f9184959c0dfe48fef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:fb:da:14:78:8f:49:00:0a:9b:20:9b:af:
58:f1:63:fd:6c:04:49:8f:dd:ff:38:d4:65:f8:ce:
ff:70:98:6c:44:04:1b:9e:ef:2f:3d:42:43:ce:86:
1f:79:4b:24:44:bb:48:ca:6e:ce:b5:1f:64:28:76:
79:2e:00:82:c2:3f:74:b9:fd:27:b3:4c:bd:a3:4c:
d3:61:d3:90:bd:3f:7a:c6:fa:b2:11:6e:26:ef:f8:
c0:e5:31:b3:e9:04:b7:31:4c:60:04:b8:d3:df:5c:
68:d0:a5:8e:ab:e5:15:fe:f6:86:45:e9:7b:2a:b0:
09:39:c1:0f:78:f9:b2:bc:7a:57:15:62:3e:e4:88:
6f:0a:45:35:7c:84:7a:1b:99:84:b9:da:6a:35:88:
48:d3:4d:e5:75:1b:8e:94:5d:61:f5:59:e8:45:56:
d2:39:8e:6f:c4:f2:dc:32:7d:82:ff:e7:cd:6c:69:
40:49:c6:b9:e4:ee:06:e1:f8:c9:73:51:b8:e0:0a:
e8:bc:71:61:36:73:fb:04:e6:4c:29:93:47:74:12:
f0:db:4a:52:02:0c:ac:69:9d:67:5b:2d:fc:1d:bf:
bc:43:b1:d5:b0:f8:8a:3c:4c:5c:31:fe:84:40:f5:
f4:09:9e:68:b9:5a:99:2c:59:e1:f6:80:a2:63:91:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:80:E3:2A:3F:F6:79:CA:61:C2:8F:91:84:95:9C:0D:FE:48:FE:F0
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/uYDjKj_2ecphwo-RhJWcDf5I_vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.248.0/22
Signature Algorithm: sha256WithRSAEncryption
03:0b:62:55:80:fa:e1:76:bf:38:13:18:85:d9:f4:80:a5:8d:
aa:f8:d7:39:ec:40:51:5f:d7:3a:d3:36:28:36:2a:b2:ca:01:
65:68:bd:2d:80:0b:5d:4c:87:36:ed:b4:8e:6c:10:58:16:f6:
84:43:0e:3b:ee:2d:70:22:bf:10:31:d2:29:6d:4f:69:ed:49:
f2:c9:d9:3d:41:68:7f:25:9a:56:5d:78:ea:56:0b:e7:08:aa:
35:d9:33:ad:08:8e:17:be:a7:6d:21:3a:ac:5b:30:2d:0b:b9:
2c:f2:98:5c:bc:0a:b2:d4:25:9f:44:d8:81:89:0f:d5:85:c6:
03:4c:98:db:24:62:64:67:27:91:b5:20:e6:07:fe:6c:a0:89:
cf:47:00:fa:e0:98:6e:7d:2d:8d:be:5f:50:cc:db:e8:04:45:
22:dd:66:7c:9a:7f:aa:97:b9:3a:cf:57:09:22:da:ac:65:7c:
84:c7:d4:14:ef:19:68:88:b8:6f:4c:c6:7a:01:ce:94:2b:7f:
38:71:db:40:95:05:04:1b:c3:28:b6:77:a1:fb:27:90:7f:07:
a4:1d:a6:2c:d7:0b:ea:6e:18:0c:47:b2:9d:df:3b:ce:52:99:
86:d8:b8:a6:4e:75:cc:c1:83:29:24:e3:f8:da:cb:bf:41:4b:
38:04:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:39 2024 by rpki-client on console-ams.rpki-client.org